Security and Risk Consulting

Experienced Security Professionals Supporting Risk Management and Compliance

The SecureWorks Security and Risk Consulting team provides expertise and analysis to help you improve your security posture, facilitate compliance and improve operational efficiency. With deep experience in GLBA, HIPAA, Sarbanes-Oxley, PCI and NERC compliance, our security professionals identify risk and prepare you for a favorable exam of your IT controls. Our Security Consulting team delivers:

Actionable information to improve your security
Clear, concise reports to demonstrate provable security
A team of experienced professionals to analyze your environment

The SecureWorks Difference

SecureWorks' consultants distinguish themselves by combining these critical characteristics:

Expertise

With more than 2,700 clients, SecureWorks has gained extensive experience and knowledge that add tremendous value to our consulting engagements. SecureWorks' team applies the best practices learned from across our client base to improve your organization's security.
Our team has been built by identifying talented and passionate security professionals, training and developing their experience in audit engagements to ensure that they understand control design and architecture, and schooling them in a risk-based approach.
Our team is able to bridge the gap between technical and business professionals, addressing the needs of all critical audiences.

Actionable Information

Our goal is to provide your organization with actionable information you can use to improve your security and demonstrate compliance.
The SecureWorks team will deliver a final report documenting the project, any findings and a prioritized list of remediation recommendations. Our final reports are designed to meet the needs of four primary audiences:
- Executive-level, jargon-free summary
- Board-level compliance and risk oriented summary
- Auditor and Examiner-level summary
- Technical Evaluation

The SecureWorks Security Consulting Services

Compliance and Certification

ISO 27001/17799 Compliance
PCI Compliance
GLBA Compliance
HIPAA Compliance
CIP Compliance
SOX IT Control Documentation
Credit Bureau Certification

Testing and Assessments

Enterprise Risk Assessment and Analysis
Authentication and Authorization Security Assessment
COBIT Assessment
General Controls Testing
Vulnerability Assessments
Penetration Testing
End User Penetration Testing
Web Application Testing
Secure Code Audits
Network Security Assessment
System Testing
3rd Party Diligence
Physical Security Assessment
Wireless Assessment
Social Engineering
War Dialing

Residency Services

Executive Residency
Expert Residency
Technical Residency

Program Development and Governance

Red Flags Program Development
Business Impact Analysis
Corporate Information Security Program Development
Policies, Standards and Security Baseline Development
Security Awareness Program Development and Training
Vendor Management Program Development
Merger and Acquisition IT Controls Diligence
Incident Response Program Development
Internal Audit Support

Incident Response Services

Response Planning & Analysis
Emergency Response
Incident Handling Services
Forensic Investigation
Malicious Code Analysis
Response Testing & Capability Analysis
Retainer Services
Phishing Takedown

Architecture

Enterprise Security Architecture and Standards Development
Identity and Access Management Architecture
Wireless and Mobility Architecture
Network Security Architecture
Remote Access